<img style="float: right" src="http://www.iexbeta.com/images/news/logos/iexMozilla.gif">Developers at the open-source Mozilla Foundation have confirmed that the latest version of their Web browsers have a security flaw that could allows attackers to run existing programs on the Windows XP operating system.

The flaw, known as the "shell" exploit, was publicized Wednesday on a security mailing list, along with a link to a fix for the problem. Updated versions of the affected software programs, which include the Mozilla, Firefox and Thunderbird browsers, have been released.

Developers said the flaw affected only Windows users, not computers running either the Macintosh or Linux operating systems. Like recent Internet Explorer vulnerabilities, this flaw only allows the attacker the ability to run an existing program and requires that security problems in other applications be exploited to gain further access.

Download: Security Fix

View: Full Story
News source: C|NET News

OoOops, I guess Mozilla software is not as safe as some people "here" make it look like.

Well, it is made by humans so it is going to suck either way.

nothing is 100% safe. Thx for the info

I still like it a lot.. but there are just some things you still have to use IE for..

quoth the browser " 404 "

Hmm, lets see, one exploit in Mozilla, which is an OSS project allowing public review, thus allowing bugs and exploits to be patched faster, versus IE, with only god knows how many exploits, and is closed source, and only MS can fix it? I would rather take my chances with FireFox than IE, thank you very much. The security record in exploits for IE versus Mozilla is like Hitler compared to killing a fly.